Snyk Vulnerbility Engineer

Source Technology Ltd

Madrid, Spain

25 days ago

Apply on www.buscojobs.com.es

Prepare application

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience required

5 years minimum

Working hours

Regular working hours

Job source

www.buscojobs.com.es

Tech stack

Amazon Web Services JIRA Microsoft Azure DevOps Github Python (Programming Language) Open Web Application Security Software Engineering Software Vulnerability Management Automatic Programming Software Security Gitlab

+5 more

Bitbucket Terraform Devsecops Static Application Security Testing Dynamic Application Security Testing

Job description

Senior Vulnerability Management SpecialistApplication Security

DevSecOps

Snyk

AutomationWe are seeking an experiencedSenior Vulnerability Management Specialistto design, own, and continuously improve our application vulnerability management programme.You’ll be responsible for driving vulnerability remediation across development and DevOps teams, ensuring security risks are prioritised, tracked, remediated, and reported through a scalable and automated process.Key ResponsibilitiesOwn the end-to-end application vulnerability management lifecycle.Triage and prioritise vulnerabilities using risk-based methodologies including CVSS, EPSS, exploitability, business criticality, and data sensitivity.Manage findings from SAST, DAST and SCA security tooling, with a strong focus on application security.Drive remediation activities with engineering, DevOps, and application owner communities.Create and manage Jira workflows, tickets, SLAs, escalations, and exception processes.Verify remediation through rescanning and reporting.Develop automation for vulnerability tracking, ownership assignment, notifications, reporting, and governance.Produce management dashboards and security risk reporting.Continually improve vulnerability coverage, remediation efficiency, and developer engagement.Required Experience5+ years’ experience in Vulnerability Management, Application Security, DevSecOps, or a related security discipline.Strong experience operating enterprise-scale application vulnerability management programmes.Experience working with Snyk or equivalent application security platforms.Strong understanding of secure software development, CI/CD pipelines, and modern DevSecOps practices.Experience working closely with software engineering and DevOps teams to drive remediation.Hands-on experience with Jira workflow design and automation.Ability to communicate technical risks clearly to both technical and non-technical stakeholders.Desirable SkillsGitLab, GitHub, Azure DevOps, or Bitbucket.OWASP Top 10, CVE, CVSS, CWE, and EPSS.AWS and Infrastructure-as-Code automation (Terraform).Experience in regulated environments such as ISO *** or NIS2.Ideal CandidateA senior security professional with a blend ofApplication Security, Vulnerability Management, DevSecOps, stakeholder engagement, and automation expertise. You’ll be comfortable influencing engineers and application owners, driving remediation without direct authority, and building a scalable, risk-driven security programme that supports modern software delivery#J-***-Ljbffr

Requirements

5+ years’ experience in Vulnerability Management, Application Security, DevSecOps, or a related security discipline. Strong experience operating enterprise-scale application vulnerability management programmes. Experience working with Snyk or equivalent application security platforms. Strong understanding of secure software development, CI/CD pipelines, and modern DevSecOps practices. Experience working closely with software engineering and DevOps teams to drive remediation. Hands-on experience with Jira workflow design and automation. Ability to communicate technical risks clearly to both technical and non-technical stakeholders. Desirable Skills GitLab, GitHub, Azure DevOps, or Bitbucket. OWASP Top 10, CVE, CVSS, CWE, and EPSS. AWS and Infrastructure-as-Code automation (Terraform). Experience in regulated environments such as ISO *** or NIS2. Ideal Candidate A senior security professional with a blend of Application Security, Vulnerability Management, DevSecOps, stakeholder engagement, and automation expertise . You’ll be comfortable influencing engineers and application owners, driving remediation without direct authority, and building a scalable, risk-driven security programme that supports modern software delivery #J-***-Ljbffr

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.buscojobs.com.es

Prepare application

Good distractions

Loading talks and stories from around this role…